Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nwFRNd5u5Be98uA6xLEZYxeCJpE.roa
File:                     nwFRNd5u5Be98uA6xLEZYxeCJpE.roa (raw, json)
Hash identifier:          PFj8CfL3KdufHNR0gPtisjP+ksO474+3Ig/tK4gllrg=
Subject key identifier:   9F:01:51:35:DE:6E:E4:17:BD:F2:E0:3A:C4:B1:19:63:17:82:26:91
Certificate issuer:       /CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
Certificate serial:       018DE4776CDCEC2275770F0EB45FCC7C3F0B
Authority key identifier: D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nwFRNd5u5Be98uA6xLEZYxeCJpE.roa
Signing time:             Mon 26 Feb 2024 08:10:48 +0000
ROA not before:           Mon 26 Feb 2024 08:10:48 +0000
ROA not after:            Tue 01 Jul 2025 00:00:00 +0000
asID:                     2121
IP address blocks:        193.0.24.0/21 maxlen: 21
                          2001:67c:64::/48 maxlen: 48
                          2001:67c:64:ffff:0:18d:c109:b478/128 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:8d:e4:77:6c:dc:ec:22:75:77:0f:0e:b4:5f:cc:7c:3f:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3b3da3ecb8a7d433de38338667b35e68df73f8c
        Validity
            Not Before: Feb 26 08:10:48 2024 GMT
            Not After : Jul  1 00:00:00 2025 GMT
        Subject: CN=9f015135de6ee417bdf2e03ac4b1196317822691
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:f2:b7:a8:85:9d:e6:9a:90:52:4a:be:8e:2c:
                    a9:ec:a5:c4:46:f4:f9:e6:cd:52:79:eb:24:dc:68:
                    03:23:50:25:06:a4:c2:c0:c0:99:96:15:96:ba:73:
                    64:bb:be:0b:e9:73:4a:8d:ff:56:af:9f:91:a6:8b:
                    4b:3f:65:8c:e1:2c:8d:38:9f:e1:73:4a:c2:25:a4:
                    05:0d:47:4b:1c:35:aa:d9:d8:2f:c2:c0:35:23:db:
                    71:77:9e:01:a3:f3:c0:9c:ed:ff:c7:bd:21:5e:55:
                    8b:8d:80:6d:ef:f7:63:80:a9:49:5d:6d:23:4b:63:
                    c6:d6:77:df:89:3e:02:8d:02:20:d5:b6:71:83:29:
                    cd:7a:f4:1f:ec:d9:ba:26:12:74:9d:72:a7:d7:e4:
                    d4:0e:ef:b1:7c:93:d5:63:92:61:40:1e:98:08:44:
                    07:fc:6f:89:e7:5d:7e:e6:64:c7:0b:6e:5e:06:a5:
                    1f:ab:73:77:9a:4f:b0:cb:8a:8d:bd:05:4e:0c:da:
                    fc:75:0a:fc:85:6d:70:48:08:c9:4a:40:0f:f5:11:
                    d9:94:05:32:51:38:5a:1e:c7:50:fc:86:7c:da:bc:
                    5a:02:7c:c1:a4:15:33:a3:d1:79:46:33:72:84:72:
                    9d:0e:0c:e1:e0:47:d4:5c:c4:df:03:62:27:b3:ee:
                    56:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:01:51:35:DE:6E:E4:17:BD:F2:E0:3A:C4:B1:19:63:17:82:26:91
            X509v3 Authority Key Identifier:
                keyid:D3:B3:DA:3E:CB:8A:7D:43:3D:E3:83:38:66:7B:35:E6:8D:F7:3F:8C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/07PaPsuKfUM944M4Zns15o33P4w.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/nwFRNd5u5Be98uA6xLEZYxeCJpE.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/e0520d-9ba6-41a3-8f87-c53979d66ca5/1/07PaPsuKfUM944M4Zns15o33P4w.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.0.24.0/21
                IPv6:
                  2001:67c:64::/48

    Signature Algorithm: sha256WithRSAEncryption
         18:1c:12:d5:ab:96:bd:63:78:87:dd:fd:98:58:87:0f:3b:70:
         44:8e:7f:bb:6a:6f:55:2d:af:65:37:0c:dd:24:b9:6f:b0:3b:
         7f:6c:42:a3:9d:73:96:0f:40:ce:32:df:60:d9:b1:99:2a:b2:
         d9:d3:73:d9:12:72:13:53:9a:4c:3c:13:5f:5e:68:3b:b9:62:
         89:44:3d:3a:3a:17:11:d2:69:14:f2:5b:87:69:cf:4f:ad:f4:
         9c:9e:b4:87:6e:89:59:6a:7f:bc:cf:e6:d8:df:80:df:47:4a:
         f0:ae:aa:2f:4d:df:07:c3:75:7f:e8:29:da:df:3a:b4:3d:cc:
         6e:9b:2b:16:bd:b7:46:9b:84:0c:3a:34:36:0d:ce:91:cf:21:
         c2:2a:ac:b2:4a:fe:83:c1:67:c9:82:aa:34:46:15:0d:53:1e:
         da:b4:80:9e:84:4f:be:bd:09:8b:73:b8:b4:db:6d:02:93:a1:
         a1:23:86:79:ae:2a:f1:46:5b:5f:bf:91:e3:34:fd:1b:eb:4a:
         d2:19:50:78:e2:e5:c3:59:d6:c9:1c:68:eb:f0:a6:4f:e5:1c:
         d7:27:15:b3:1c:6d:16:67:0e:71:58:8d:22:de:3a:ad:2c:a3:
         8a:60:35:c6:f7:81:f2:b1:e5:3e:eb:c1:ae:5d:e4:10:9c:f3:
         54:9c:af:87
-----BEGIN CERTIFICATE-----
MIIFDjCCA/agAwIBAgISAY3kd2zc7CJ1dw8OtF/MfD8LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzYjNkYTNlY2I4YTdkNDMzZGUzODMzODY2N2IzNWU2OGRm
NzNmOGMwHhcNMjQwMjI2MDgxMDQ4WhcNMjUwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZjAxNTEzNWRlNmVlNDE3YmRmMmUwM2FjNGIxMTk2MzE3ODIyNjkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5fK3qIWd5pqQUkq+jiyp7KXERvT5
5s1Seesk3GgDI1AlBqTCwMCZlhWWunNku74L6XNKjf9Wr5+RpotLP2WM4SyNOJ/h
c0rCJaQFDUdLHDWq2dgvwsA1I9txd54Bo/PAnO3/x70hXlWLjYBt7/djgKlJXW0j
S2PG1nffiT4CjQIg1bZxgynNevQf7Nm6JhJ0nXKn1+TUDu+xfJPVY5JhQB6YCEQH
/G+J511+5mTHC25eBqUfq3N3mk+wy4qNvQVODNr8dQr8hW1wSAjJSkAP9RHZlAUy
UThaHsdQ/IZ82rxaAnzBpBUzo9F5RjNyhHKdDgzh4EfUXMTfA2Ins+5WoQIDAQAB
o4ICGjCCAhYwHQYDVR0OBBYEFJ8BUTXebuQXvfLgOsSxGWMXgiaRMB8GA1UdIwQY
MBaAFNOz2j7Lin1DPeODOGZ7NeaN9z+MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODct
YzUzOTc5ZDY2Y2E1LzEvbndGUk5kNXU1QmU5OHVBNnhMRVpZeGVDSnBFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9lMDUyMGQtOWJhNi00MWEzLThmODctYzUzOTc5ZDY2Y2E1
LzEvMDdQYVBzdUtmVU05NDRNNFpuczE1bzMzUDR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQDwQAYMA8E
AgACMAkDBwAgAQZ8AGQwDQYJKoZIhvcNAQELBQADggEBABgcEtWrlr1jeIfd/ZhY
hw87cESOf7tqb1Utr2U3DN0kuW+wO39sQqOdc5YPQM4y32DZsZkqstnTc9kSchNT
mkw8E19eaDu5YolEPTo6FxHSaRTyW4dpz0+t9JyetIduiVlqf7zP5tjfgN9HSvCu
qi9N3wfDdX/oKdrfOrQ9zG6bKxa9t0abhAw6NDYNzpHPIcIqrLJK/oPBZ8mCqjRG
FQ1THtq0gJ6ET769CYtzuLTbbQKToaEjhnmuKvFGW1+/keM0/RvrStIZUHji5cNZ
1skcaOvwpk/lHNcnFbMcbRZnDnFYjSLeOq0so4pgNcb3gfKx5T7rwa5d5BCc81Sc
r4c=
-----END CERTIFICATE-----